CVE-2022-1012

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

Score

CVSS 3.1 8.2 High

Status

Modified - secalert@redhat.com

Published

2022-08-05

Last modified

2026-10-14

Weaknesses

CWE-401

Affected products

• Linux Kernel (Linux)
• Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)

References

• https://lore.kernel.org/lkml/20220427065233.2075-1-w%401wt.eu/T/
• https://bugzilla.redhat.com/show_bug.cgi?id=2064604
• https://security.netapp.com/advisory/ntap-20221020-0006/
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• https://cert-portal.siemens.com/productcert/html/ssa-561322.html